Privacy Policy

Introduction

Axis Consulting ("we," "us," or "our") is committed to protecting the privacy and security of personal information collected through our consulting services and website. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or engage our consulting services, in accordance with the Personal Data (Privacy) Ordinance (PDPO) of Hong Kong.

By using our website or engaging our services, you acknowledge that you have read and understood this Privacy Policy. If you have questions about this policy or our data practices, please contact us at [email protected].

Information We Collect

Personal Information You Provide

We collect personal information that you voluntarily provide when you contact us, request our services, or engage in consulting projects. This may include your name, email address, phone number, business name, job title, and any other information you choose to provide in your communications with us.

Automatically Collected Information

When you visit our website, certain information is automatically collected, including your IP address, browser type, operating system, referring URLs, pages viewed, and the dates and times of visits. This information is collected through cookies and similar tracking technologies. Please refer to our Cookie Policy for more detailed information.

Consulting Project Information

During consulting engagements, we may collect organizational information, financial data, employee information (as relevant to the project scope), and other business-related data necessary to provide our services effectively. The specific information collected varies based on the nature of each engagement and is defined in our consulting agreements.

How We Use Your Information

We use collected information for the following purposes:

• To provide, maintain, and improve our consulting services
• To respond to inquiries and communicate with you about our services
• To fulfill contractual obligations under our consulting agreements
• To send administrative information, such as updates to our terms or policies
• To analyze website usage and improve user experience
• To comply with legal obligations and protect our legal rights
• With your consent, to send marketing communications about our services

Legal Basis for Processing

We process your personal data based on the following legal grounds: performance of consulting contracts, compliance with legal obligations, legitimate business interests (such as improving our services and preventing fraud), and consent where explicitly provided for specific purposes such as marketing communications.

Data Protection and Security

We implement appropriate technical and organizational measures to protect personal information against unauthorized access, alteration, disclosure, or destruction. These measures include encryption of data in transit and at rest, secure server infrastructure, access controls limiting data access to authorized personnel, regular security assessments, and staff training on data protection practices.

While we strive to protect your personal information, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security but commit to promptly notifying affected individuals and relevant authorities in the event of a data breach as required by applicable law.

Information Sharing and Disclosure

We do not sell, rent, or trade your personal information. We may share your information in the following limited circumstances:

• Service Providers: We may engage third-party companies to perform services on our behalf, such as website hosting, data analysis, or IT infrastructure. These providers have access only to information necessary to perform their functions and are contractually obligated to maintain confidentiality.
• Legal Requirements: We may disclose information when required by law, court order, or governmental authority, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity, subject to the same privacy protections.
• With Your Consent: We may share information with third parties when you have provided explicit consent for such disclosure.

Data Retention

We retain personal information for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods include:

• Contact form inquiries: 2 years from last contact
• Consulting project data: 7 years following engagement completion (to comply with business record requirements)
• Website analytics data: 26 months
• Marketing communications: Until you unsubscribe or request deletion

When personal information is no longer required, we securely delete or anonymize it in accordance with our data retention policy and applicable legal requirements.

Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance user experience and analyze site usage. Cookies are small data files stored on your device that help us recognize you and remember your preferences.

We use the following types of cookies: essential cookies necessary for website functionality, analytics cookies to understand how visitors use our site, and preference cookies to remember your settings and choices. For detailed information about our cookie practices and how to manage your preferences, please review our Cookie Policy.

Your Privacy Rights

Under Hong Kong's Personal Data (Privacy) Ordinance, you have the following rights regarding your personal information:

• Right to Access: You may request copies of your personal information that we hold and details about how we process it.
• Right to Correction: You may request correction of inaccurate or incomplete personal information.
• Right to Data Portability: You may request to receive your personal information in a structured, commonly used format.
• Right to Erasure: You may request deletion of your personal information, subject to legal obligations requiring retention.
• Right to Object: You may object to processing of your personal information for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw consent at any time.

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one month, though this period may be extended by two additional months where requests are complex or numerous.

Third-Party Websites

Our website may contain links to third-party websites not operated by us. We are not responsible for the privacy practices of these external sites. We encourage you to review the privacy policies of any third-party sites you visit. This Privacy Policy applies only to information collected through our website and consulting services.

Children's Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal information, please contact us immediately. If we discover that we have collected information from a child without parental consent, we will promptly delete such information.

International Data Transfers

Your information may be transferred to and processed in countries other than Hong Kong, including countries that may not have equivalent data protection laws. When we transfer personal information internationally, we ensure appropriate safeguards are in place, such as standard contractual clauses or adequacy decisions, to protect your information in accordance with this Privacy Policy.

Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by posting the updated policy on our website with a revised "Last Updated" date. We encourage you to review this policy regularly. Your continued use of our services after changes become effective constitutes acceptance of the updated policy.

Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

If you are not satisfied with our response to your privacy concern, you have the right to lodge a complaint with the Office of the Privacy Commissioner for Personal Data in Hong Kong.